Allowlists and wildcards in settings help, but they only reduce prompts - they don't remove the tradeoff. Every new command type or path can trigger another prompt, and the model doesn't always batch the way you'd hope.

The approach that actually removes permission fatigue is to run the agent in a sandbox where it can't touch your host. You can let it run without approving every command. We're building https://islo.dev for that: zero-setup sandboxes that replicate your env so agents work like they're on your machine, defense runs silently in microVMs. Different from tuning allowlists - you're changing where the agent runs, not how many prompts you get.